diff --git a/ui/severity.md b/ui/severity.md
new file mode 100644
index 0000000..cd01224
--- /dev/null
+++ b/ui/severity.md
@@ -0,0 +1,13 @@
+Severity meaning:
+
+Low
+Informational or background signal.
+
+Medium
+Worth analyst review.
+
+High
+Likely malicious or actionable.
+
+Critical
+Immediate attention required.